agent-figma

SUSPICIOUS. The skill’s capabilities, requested Figma scopes, local cache/config access, and read-only workflows are largely proportionate to its stated purpose, and data flow appears directed to official Figma APIs rather than a proxy. The main concern is install/execution trust: the skill centers on a third-party agent-figma CLI that does not appear to be an official Figma-distributed tool, so users would be entrusting Figma tokens and design data to externally published code. No confirmed malware, exfiltration endpoint, stealth behavior, or dangerous pre-execution syntax is present in the provided skill text.